LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   Disable PaX for Nvidia Drivers (https://www.linuxquestions.org/questions/linux-software-2/disable-pax-for-nvidia-drivers-856318/)

dman777 01-14-2011 09:59 AM
Disable PaX for Nvidia Drivers
 
When using hardened gentoo kernel with PaX and SELinux...but SELinux is disable...I can not run Compiz Fusion. I get: Compiz: error while loading shared libraries: libgl.so.1: failed to map segment from object: operation not permitted". I went into X without compiz fine with no problems. Just seems to be with Compiz-Fusion. Can anyone help please? This is with Nvidia closed source drivers.

business_kid 01-14-2011 11:24 AM
libGL.so.1 is a basic graphics library. Nvidia installs it's own proprietary one. Post the output of

ls -l /usr/lib(64)/libGL*

dman777 01-14-2011 11:40 AM
Code:
localhost three # ls -l /usr/lib64/libGL*
lrwxrwxrwx 1 root root    36 Jan 14 09:07 /usr/lib64/libGL.so -> opengl/nvidia/lib/libGL.so.260.19.29
lrwxrwxrwx 1 root root    11 Jan 12 14:29 /usr/lib64/libGLU.so -> libGLU.so.1
lrwxrwxrwx 1 root root    20 Jan 12 14:29 /usr/lib64/libGLU.so.1 -> libGLU.so.1.3.070900
-rwxr-xr-x 1 root root 526184 Jan 12 14:29 /usr/lib64/libGLU.so.1.3.070900
lrwxrwxrwx 1 root root    39 Sep 27 05:54 /usr/lib64/libGLcore.so -> opengl/nvidia/lib/libGLcore.so.96.43.16
localhost three #
What do you think?


I should mention that I recompiled my kernel with PaX off and I am now able to get into Compiz Fusion. The output above is with the kernel having the PaX off(although I don't believe it should matter).


UPDATE:
Ok, I've been told that Nvidia binary drivers will not work with PaX. How can I disable it with paxctl?

slimm609 01-14-2011 07:42 PM
you may have to run it on a few different files but if you have paxctl installed it will be paxctl -pemrxs /path/to/file. If that works you can remove them with paxctl -PEMRSX /path/to/file and run it again then look at the logs to see what is actually stopping it and just disable the one feature with paxctl to make sure its working properly.

here is the help from paxctl so when you see something specific in the logs you can map it back to a specific feature of PAX.
Code:
usage: paxctl <options> <files>

options:
        -p: disable PAGEEXEC            -P: enable PAGEEXEC
        -e: disable EMUTRMAP            -E: enable EMUTRMAP
        -m: disable MPROTECT            -M: enable MPROTECT
        -r: disable RANDMMAP            -R: enable RANDMMAP
        -x: disable RANDEXEC            -X: enable RANDEXEC
        -s: disable SEGMEXEC            -S: enable SEGMEXEC

        -v: view flags                  -z: restore default flags
        -q: suppress error messages    -Q: report flags in short format
        -c: convert PT_GNU_STACK into PT_PAX_FLAGS (see manpage!)
        -C: create PT_PAX_FLAGS (see manpage!)

business_kid 01-15-2011 02:30 AM
To your libs first. I don't see libGL.so.1 which should point at opengl/nvidia/lib/libGL.so.260.19.29, presuming 260.19.29 is your nvidia version.
Quote:
UPDATE:
Ok, I've been told that Nvidia binary drivers will not work with PaX. How can I disable it with paxctl?
Read.Pax is kernel; based stuff, iirc pax & grsecurity used to be one big patch at one stage, implementing all sorts of weird things and nvidia's drivers probably aren't up to it. Are you on HLFS or something?


All times are GMT -5. The time now is 05:36 PM.